HackingFinancial ServicesFinanceData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHighContained

SN Servicing Corporation

bd_7b8b73c450e5945f · schema v1 · pii pii-v1

Severity

High

Discovered

Oct 15, 2020

Filed

Jul 26, 2021

To disclose

41 weeks

Affected

3,179state residents only

Linked

10 filings

Confidence

65%

Full breach record for SN Servicing Corporation →2 incidents on file

SN Servicing Corporation notified South Carolina and other state residents of a cybersecurity incident discovered on October 15, 2020. Unauthorized access to the network resulted in the exfiltration of borrower data, including names, contact info, DOB, SSNs, and loan details. SN terminated access, hired forensic investigators and a data mining vendor, and provided complimentary credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d41 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 41 weeks / 284 days

Oct 15, 2020

Discovered

Jul 26, 2021

Filed

vs. sector median

+32 wks slower

This filing is one of 10 about the same incident.View merged incident

A leak claim by egregor about this victim predates this filing by 284 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteegregorbd_4bc6fb5649261ccf2020-10-15 · +284dVerified

Regulatory filings (8) · sorted by filing gap

Maine State AGbd_376b6357c22f175f2021-07-16 · +10dVerified
Oregon State AGbd_d479dd57d0545f1f2021-07-16 · +10dVerified
California State AGbd_d772c960f49e9ed82021-07-16 · +10dVerified
California State AGbd_0424e3f59662bb0d2021-01-29 · +178dVerified

Show 4 more filings ↓up to 206d gap

Maine State AGbd_62f5a428547a502d2021-01-15 · +192dVerified by operator
New Hampshire State AGMount Lockerbd_b8759a76ab97511d2021-01-15 · +192dVerified by operator
Indiana State AGbd_c6e80a15fece44ed2021-01-15 · +192dVerified by operator
Illinois State AGbd_225df64f9dbda7ba2021-01-01 · +206dVerified by operator

Name: SN Servicing Corporation
norm: sn servicing

Name: SN Servicing Corporation
norm: sn servicing
Industry: Financial Servicesllm

Discovered: Oct 15, 2020
Materiality determined: —
Notification sent: —
Affected individuals: 3,179state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified state regulators
Initial access: exploit_public_facing

During the incident: Retained a specialized cybersecurity forensic team to conduct an investigation
Terminated the access
Hired a data mining vendor to review the remaining documents
Engaged in a substantial data validation process
Procured credit monitoring for affected individuals
Drafted notices to individuals, consumer credit reporting agencies, and state regulators
Changes made: Strengthened its security posture
Obtained complimentary credit monitoring for all affected individuals
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 41 weeks(284 days from discovery to filing)
Compliance flags: Leak >180dSC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 7 states

View merged incident ↗

Illinois State AGJan 1 · first

Maine State AG+14d

New Hampshire State AG+14d

Indiana State AG+14d

California State AG+28d

Maine State AG+196d

Oregon State AG+196d

California State AG+196d

South Carolina State AG+206d · this page

Pattern: first filing Jan 1 (IL), last Jul 26 (SC) — a 206-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2021/SNServicingCorp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 26, 2021
Raw hash: c6ede63b0d7240a7dfcd74ac522eb68bd79e10f70d298d5dd2caf3787f8566c2

Linked disclosures

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Reporting entitySN Servicing Corporation

Victim entitySN Servicing Corporation

Incidentdiscovered Oct 15, 2020

Stated responseRetained a specialized cybersecurity forensic team to conduct an investigation

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov